• A fix for the Trackback Denial-of-Service attack that is currently being seen.
• Removal of areas within the code where php code in variables was evaluated.
• Switched the file upload functionality to be whitelisted for all users including Admins.
• Retiring of the two importers of Tag data from old plugins.

Also, if you think you may have been hit with one of the recent exploits, WordPress suggests you take a look at the WordPress Exploit Scanner plugin. Read more about the latest release here.

I updated all of my blogs today with no problems, and suggest you should to asap. Be sure to make a backup of your database as a safety precaution.

Fix for including YouTube videos in posts in WordPress MU

To make the fix, open wp-includes/kses.php.

Look for:

if (!CUSTOM_TAGS) {
$allowedposttags = array (

and Add:

'embed' => array (
'style' => array (),
'type' => array (),
'id' => array (),
'height' => array (),
'width' => array (),
'src' => array ()),
'object' => array (
'height' => array (),
'width' => array ()),
'param' => array (
'name' => array (),
'value' => array ()),

to allow embedding of videos.

You can do the same for other HTML codes like

I’m going to assume that you already know how to install and use WordPress. If not, see this great “New to WordPress – Where to Start” guide first.

• Breadcrumb NavXT add breadcrumb links at the top of your posts. To use, you need to add in a short snippet of code in your ‘page.php’ template. (Sample – See Home > Portfolio > Photography)
• List Pages Shortcode allows you to use a nice shortcode in a page and display all of its child pages. For example, adding [child-pages sort_column="post_title"] to a page will list all the child pages of the parent page. (Sample)
• Recently Updated Posts displays the last blog posts and pages you updated. It’s pretty handy since static pages need to be updates all the time. (Sample – see recently updated)
• WP Lightbox 2 displays your graphics/photography in a nice lightbox. (Sample)
• WordPress Database Backup is an easy-to-use on-demand database backup script. Since all your changes are stored in a database and not physical files, being able to back them up periodically is a good idea.

After downloading a plugin, unzip the file, and upload the content into the /wp-content/plugins/ folder of your WordPress installation. These plugins were pretty easy to install, but please read the README files first.

WordPress and these plugins should help you get your web portfolio up in no time. Be sure to check WordPress.org for more plugins.

This bookazine is $29.99, but with a Costco membership, it’s $21.99. Enjoy!

It was originally written by Michel V and called b2 (then cafelog). I use to help him beta new versions of b2. Michel moved onto new projects and stopped developing b2, and that’s when Matt Mullenweg stepped in. WordPress has come such a long way. To me it’s like watching a child grow up!

I hope to see you at Wordcamp SF 2009! It’s on Saturday, May 30th. And I will most likely organize a Tweetup the night before, so keep an eye out. :)

WordCamp San Francisco is a conference organized by the creators of WordPress for our users and developers. Everyone from casual users to core developers participate, share ideas, and get to know each other. The event is open to WordPress.com & WordPress.org users alike.

Stream videos at Ustream

What I’m really excited about is WordPress 2.7, Automatic Updates, and BuddyPress! Check out the session, it’s very interesting.

As for the media upload problem, it may be the Visual Editor breaking the code. I remember embedding a flash video once and my post just kept breaking every time I edited it. I ended up turning the Visual Editor off so I can paste HTML code without the editor changing it.

If you’re still running a WordPress version older than 2.5, you can turn off the visual editor by doing this:

• Go to the “Users” tab, and find your author (usually ‘admin’).
• Click on “Edit.”
• Uncheck “Use the visual editor when writing. (See image above.)
• Click on “Update User”

This will then give you only the basic buttons when editing.